Back to CVE records
Medium 5.5Published May 17, 2024
CVE-2023-52675powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
Updated under an hour ago ()
Does this affect you?
It affects Linux and 4 other products. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: powerpc/imc-pmu: Add a null pointer check in update_events_in_group() kasprintf() returns a pointer to dynamically allocated memory which can be NULL upon failure.
- CVSS
- 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Modified
- Record last updated
- Oct 15, 2026
- First seen by InfoSec Signals
- Oct 15, 2026
Affected products
Linux Linux linux:linux (from the name) | 885dcd709ba9120b9935415b8b0f9d1b94e5826b builds before 75fc599bcdcb1de093c9ced2e3cccc832f3787f3; 885dcd709ba9120b9935415b8b0f9d1b94e5826b builds before 1e80aa25d186a7aa212df5acd8c75f55ac8dae34; 885dcd709ba9120b9935415b8b0f9d1b94e5826b builds before 5a669f3511d273c8c1ab1c1d268fbcdf53fc7a05; from 885dcd709ba9120b9935415b8b0f9d1b94e5826b before f105c263009839d80fad6998324a4e1b3511cba0; from 885dcd709ba9120b9935415b8b0f9d1b94e5826b before a2da3f9b1a1019c887ee1d164475a8fcdb0a3fec; from 885dcd709ba9120b9935415b8b0f9d1b94e5826b before 024352f7928b28f53609660663329d8c0f4ad032; from 885dcd709ba9120b9935415b8b0f9d1b94e5826b before c7d828e12b326ea50fb80c369d7aa87519ed14c6; 885dcd709ba9120b9935415b8b0f9d1b94e5826b builds before 0a233867a39078ebb0f575e2948593bbff5826b3 | CNA record |
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518_4_pn_dp_mfp (from the name) | from V3.1.0 before V3.1.5 | CISA ADP |
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518f_4_pn_dp_mfp (from the name) | from V3.1.0 before V3.1.5 | CISA ADP |
Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP siemens:siplus_s7_1500_cpu_1518_4_pn_dp_mfp (from the name) | from V3.1.0 before V3.1.5 | CISA ADP |
linux linux_kernel linux:linux_kernel | from 4.14 before 4.19.306; from 4.20 before 5.4.268; from 5.5 before 5.10.209; from 5.11 before 5.15.148; from 5.16 before 6.1.75; from 6.2 before 6.6.14; from 6.7 before 6.7.2 | NVD |
References
- https://git.kernel.org/stable/c/75fc599bcdcb1de093c9ced2e3cccc832f3787f3mailing-list, patch
- https://git.kernel.org/stable/c/1e80aa25d186a7aa212df5acd8c75f55ac8dae34mailing-list, patch
- https://git.kernel.org/stable/c/5a669f3511d273c8c1ab1c1d268fbcdf53fc7a05mailing-list, patch
- https://git.kernel.org/stable/c/f105c263009839d80fad6998324a4e1b3511cba0mailing-list, patch
- https://git.kernel.org/stable/c/a2da3f9b1a1019c887ee1d164475a8fcdb0a3fecmailing-list, patch
- https://git.kernel.org/stable/c/024352f7928b28f53609660663329d8c0f4ad032mailing-list, patch
- https://git.kernel.org/stable/c/c7d828e12b326ea50fb80c369d7aa87519ed14c6mailing-list, patch
- https://git.kernel.org/stable/c/0a233867a39078ebb0f575e2948593bbff5826b3mailing-list, patch
- https://lists.debian.org/debian-lts-announce/2024/06/msg00016.htmlmailing-list
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.